PHI that may have been affected as a result of the cybersecurity breach include names, health insurance information, provider name, date of service, amount paid/owed, diagnosis codes, addresses, phone numbers and Social Security numbers, according to a statement Shingle Springs published to its website.
The medical center said it is unaware of any attempted misuse of any patients’ PHI due to the ransomware attack, which encrypted Shingle Springs’ files, disabled its information systems and prevented clinical staff from accessing them. Shingle Springs provides medical, behavioral, dental and pharmacy services.
After discovering the ransomware, Shingle Springs reported the cyberattack to the FBI and notified the Indian Health Service, a branch within HHS that oversees health services for Native American Tribes and Alaska Native people, according to the statement. The medical center also implemented new servers, system upgrades and updates to all workstations and is offering one year of free credit monitoring to patients whose information may have been compromised.
More articles on cybersecurity:
Phishing attack exposes nearly 15,000 LA County health patients’ information
Hospital CFOs are stepping into cybersecurity roles
US warns against Microsoft Outlook vulnerability
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.